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All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . This communication is responsive to telephone interview on 02/25/2011 . 

2. The allowed claim(s) is/are 1-3,6-12 and 15-20 . 

3. ^ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 

a) ^ All b) □ Some* c) □ None of the: 

1 . ^ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
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Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 
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EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .31 2. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Brian Kearns on 02/25/201 1 . 

Claims 5 and 14 have been canceled. 

Claims 1,10 and 18 have been amended as follows: 

Claim 1 : A method for granting access to a second institution for or via a second 
device by linking of a first characteristic of a first device and a second characteristic of a 
second device by a server, comprising the steps of: 

receiving at the server a request for triggering the following steps: 

selecting a first linking information and a second linking information, the first 
linking information matching to the second linking information, 

sending from the server the first linking information to the first device and the 
second linking information to the second device, where the first device is a trusted 
device and the first characteristic relates to an access legitimization legitimating the first 
device for accessing a first institution, 

presenting by the first device the first linking information and by the second 
device the second linking information, the step of presenting being performed after the 
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step of sending such that the first linking information is output on the first device in 
parallel to output of the second information on the second device, 

entering into the first device an indication of the matching of the first linking 
information and the second linking information, 

based on the entered indication of the matching, sending from the first device to 
the server a matching confirmation for confirming the matching to the server, 

associating the first characteristic and the second characteristic based on the 
received matching confirmation, 

for executing the linking, the server further verifying the access legitimization of 
the first device, 

based on the linking, sending a message from the server for granting access to 
the second institutionrr.11 , and 

wherein the second characteristic comprises an identifier identifying the second 
device and access to a second institution is granted to or via the second device based 
on the associating of the first characteristic relating to the access legitimization and the 
second characteristic comprising the identifier, the second institution being identical to 
or different from the first institution. 

Claim 10: A server for granting access to a second institution for or via a second 
device by linking of a first characteristic of a first device and a second characteristic of a 
second device, the server comprising: 

a receiving unit for receiving messages, 
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a transmitting unit for sending messages, and 

a processing unit for processing messages and information, 

wherein the receiving unit receives a request for linking, the processing unit is 

triggered by the received request for linking and selects a first linking information and a 

second linking information, the first linking information matching to the second linking 

information, 

the transmission unit sends the first linking information to the first device and the 
second linking information to the second device such that the first linking information is 
output on the first device in parallel to output of the second linking information on the 
second device, the first device being a trusted device and the first characteristic relating 
to an access legitimization legitimating the first device for accessing a first institution, 

the receiving unit receives a matching confirmation from the first device, the 
matching confirmation confirming to the processing unit the matching of the first linking 
information presented by the first device and the second linking information presented 
by the second device, [[and]] 

the processing unit executing an associating of the first characteristic and the 
second characteristic based on the received matching confirmation, and for executing 
the linking, to further verify the access legitimization of the first device, and, based on 
the linking, to send via the transmission unit a message for granting access to the 
second institutionrr.11 , and 
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wherein the second characteristic comprises an identifier identifying the second 
device and, based on the associating of the first characteristic relating to the access 
legitimization and the second characteristic comprising the identifier, the processing unit 
is adapted to generate an access assertion for granting to or via the second device 
access to a second institution being identical or different from the first institution, and 
the transmission unit is adapted to send the access assertion to the second device or 
the second institution or to an entity supporting the second device or the second 
institution for granting access. 

Claim 18: A non-transitory computer readable medium having stored thereon a 
plurality of instructions including instructions which, when executed by a processor, 
cause the processor to perform the steps of a method for granting access to a second 
institution for or via a second device by linking of a first characteristic of a first device 
and a second characteristic of a second device, comprising of: 

responsive to a request received at the server, triggering the following steps: 
selecting a first linking information and a second linking information, the first 
linking information matching to the second linking information, 

initializing a sending of the first linking information to the first device and a 
sending of the second linking information to the second device such that the first linking 
information is output on the first device in parallel to output of the second linking 
information on the second device, the first device being a trusted device and the first 



Application/Control Number: 10/530,829 Page 6 

Art Unit: 2431 

characteristic relating to an access legitimization legitimating the first device for 
accessing a first institution, and 

executing an associating of the first characteristic and the second characteristic 
based on a matching confirmation received from the first device, the matching 
confirmation confirming the matching of the first linking information presented by the first 
device and the second linking information presented by the second device, and for 
executing the linking, 

further verifying the access legitimization of the first device, and, based on the 
linking, initializing a sending of a message for granting access to the second 
institutionrr.11 , and 

wherein the second characteristic comprises an identifier identifying the second 
device and access to a second institution is granted to or via the second device based 
on the associating of the first characteristic relating to the access legitimization and the 
second characteristic comprising the identifier, the second institution being identical to 
or different from the first institution. 

Response to Arguments 

2. The rejection under 35 U.S.C. 112 second paragraph has been withdrawn. 

3. Applicant's arguments, filed on 09/09/201 0, with respect to claims 1 -3, 5-1 2 and 
14-20 have been fully considered and are persuasive. The rejection of claims 1-3, 5-12 
and 14-20 has been withdrawn. 
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Allowable Subject Matter 

4. Claims 1 -3, 6-1 2 and 1 5-20 are allowed. 

5. The following is an examiner's statement of reasons for allowance: As noted 
above, the Examiner agrees with the Applicant's arguments, see pages 8-9 of the 
Remarks, filed on 09/09/2010, specifically that the prior art does not teach "executing an 
associating of the first characteristic and the second characteristic based on the 
received matching confirmation, and for executing the linking, to further verify the 
access legitimization of the first device, and, based on the linking, to send via the 
transmission unit a message for granting access to the second institution, and wherein 
the second characteristic comprises an identifier identifying the second device and, 
based on the associating of the first characteristic relating to the access legitimization 
and the second characteristic comprising the identifier, the processing unit is adapted to 
generate an access assertion for granting to or via the second device access to a 
second institution being identical or different from the first institution, and the 
transmission unit is adapted to send the access assertion to the second device or the 
second institution or to an entity supporting the second device or the second institution 
for granting access". Therefore, claims 1 -3, 6-1 2 and 1 5-20 are novel and unobvious 
over the prior art of record. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
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accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to TRANG DOAN whose telephone number is (571)272- 
0740. The examiner can normally be reached on Monday- Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William R. Korzuch can be reached on (571) 272-7589. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Trang Doan/ 
Examiner, Art Unit 2431 



/William R. Korzuch/ 

Supervisory Patent Examiner, Art Unit 2431 
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